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@ Redundant facility payload signals (12, 14) received by redundant interface modules (16, 18) are redundantly 
provided (28, 30; 32, 34) to redundant downstream modules (24, 26) in an equipment (10). A non-symmetrical 
facility protection algorithm is resident in the B interface module (18). Symmetrical equipment protection 
algorithms are independently resident and operative in each module of pairs of identical A and B modules at 
each stage of the data stream. Module or data failures result in switchover only of the disabled data path or 
module so that the ability to transport payload is maintained and other modules or data paths are unaffected. 
Facility switchover is effected by detecting a working line failure and transmitting commands to switch the 
protection line to the A path modules. Equipment switchover is effected by checking for a working or protection 
module failure independently in each path and independently communicating independent switchover decisions 
to the other side and downstream. The methodology and mechanism are disclosed in a SONET element 
embodiment, although the invention is applicable in other contexts. 
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CROSS REFERENCE TO RELATED APPLICATIONS 

This disclosure discloses subject matter which is disclosed and claimed in co-pending applications U.S. 
Serial Numbers (Attorney Docket Numbers 907-115, 907-117, 907-120, 907-121, and 907-122) filed on the 
s same day as this application and owned by common assignee and which are hereby incorporated by 
reference. 

TECHNICAL FIELD 

ro This invention relates to a class of equipments known as "protected" equipment. There are many 
examples of protected equipment in systems, particularly electronic systems, and more particularly 
communications systems. The best mode embodiment of the present invention shown herein is for a 
SONET (Synchronous Optical NETwork) equipment; however, both the methodology and independently the 
mechanism are valid for and may be realized in other types of protected equipment. 

75 ' 

BACKGROUND OF THE INVENTION 

There exist many different types of equipment in a class called "protected" equipment. This class of 
equipment attempts to achieve an increase in reliability and availability of its features to its customers by 

20 structuring its implementation. This structure is realized as redundant sets of modules which are subparts of 
the equipment and which implement functions of the equipment. This equipment is structured and 
controlled such that there are redundant modules for each feature or group of features of importance for the 
equipment. In this structure there are at least two modules which can implement each important function. 
These modules are normally referred to as redundant modules or redundant module sets. Protected 

25 equipment solutions are constructed of one or more sets of these redundant modules. The premise for this 
structure is that if the currently selected one of these sets fails, the other unselected identical set can be 
quickly substituted for the failed set and the equipment can resume providing service to its customer(s). 

A methodology and mechanism is required to control and communicate information regarding the 
control of the function which decides which of the redundant sets is the selected or active set. When this 

30 function is structured to operate without intervention of a separate equipment or personnel entity, it is 
commonly referred to in the art as "automatic protection switching" (APS). When used in reference to 
communication facility protection, it has as a subset that which is commonly called "equipment protection 
switching" (EPS) used in reference to the protection of the equipment modules themselves. These 
switching decisions could be made by a central controller; however, a mechanism to communicate with a 

35 central controller and the queuing associated with central controller multi-tasking solutions can add delay in 
the reconfiguration of the equipment to restore customer service which is lost when the active module of a 
redundant module set fails. Also, if the system controller fails or is removed, the possibility to perform the 
reconfiguration process is lost. Therefore, it is desirable to realize the automatic protection switching control 
function as a redundant distributed solution, so that this process as well as the customer services might be 

40 protected from single failures. 

Automatic protection systems for network elements in the past have comprised, for example, redundant 
facility equipment wherein a detected failure in one of the redundant sides will cause a switchover from one 
redundant side to the other. In such a switchover the entire line of protection equipment on one side is 
substituted for the other, even if a failure occurred in only one place in the working channel. This approach 

45 is somewhat inflexible, in that it fails to maximize the available equipment 

Moreover, the switching decision would typically be made by the system controller but all the 
information relevant to the switchover decision then had to be sent to the system controller. Since the 
system controller services ail the information in the system, it takes a long time to accomplish the 
switchover. It also requires that all the elements on the data path need to be switched during a switchover. 

so Thus, a better mechanism would be desired to control and communicate the information in a SONET 
automatic protection switching realization. 

Moreover, it would be desirable to capitalize on the information so communicated to an extent that 
would fully provide a redundant switchover architecture. 

55 DISCLOSURE OF INVENTION 

This disclosure shows a structure and methodology which can be used to provide automatic protection 
switching between multiple redundant modules in this class of equipment (called "protected" equipment). 



3 




EP 0 570 882 A2 



This methodology realizes both a distributed multiprocessing "automatic protection switching" and 
"equipment protection switching" solution which is an alternative and improvement to the existing art of 
centralized protection switching methodologies and to other distributed processing automatic protection 
switching methodologies. This disclosure also shows a mechanism which implements the intermodule 

5 communication necessary to support this distributed automatic protection switching methodology. 

This disclosure also shows an embodiment of this methodology and mechanism in a SONET electronic 
communications equipment. The descriptions and examples from this point on will be specific to a SONET 
communications equipment. However, both the methodology and independently the mechanism are valid 
for, and may be embodied in, other types of protected equipment. 

70 Equipment of the type used in this disclosure example is commonly referred to as a network element, 
re p resen ting its use as an element of . the telecommunications network. Network elements are commonly 
realized with redundant sets of multiple modules. The multiple redundant module sets used in this 
disclosures include the following modules: high-speed interface modules (a term commonly used for SONET 
interfaces), cross-connect modules and drop modules (a term commonly used for lower speed or tributary 

75 modules).. The methodology and mechanism described in this disclosure's independent of the specific 
equipment, equipment makeup and terminology used to describe the example equipment described in this 
disclosure. ' ri 

An object of the present invention is to provide a means and method which can be used to provide 
automatic protection switching between multiple redundant modules in a class of equipment called 

20 "protected" equipment. 

Another object is to provide an automatic protection architecture. 

Still another object of the present invention is to provide a mechanism to communicate the information 
for the SONET APS function. 

According to the present invention, an automatic protection switching algorithm for a redundant pair of 

25 transmit modules is realized and operational on the protection, backup or "B" module. This algorithm 
continuously monitors the status of the signal information on both the A (working)- and B (protection) 
modules and makes the decision as to whether the A or B module shall be selected to carry the active 
copy of the information traffic. It is not necessary, according to the present invention, for the automatic 
protection switching algorithm to communicate with a system-level control function or with any of the other 

30 distributed automatic protection algorithms resident in other sets of redundant modules to make this 
decision. ■ * 

In still further accord with the present invention, for equipment protection, a processor failure algorithm 
is resident on both redundant sides for each redundant module pair. In other words, for example, for an A 
and B high-speed interface redundant pair, the APS algorithm is resident on both the A and B high-speed 

35 modules for communicating the status of each to each other independently of all the other modules on the 
A and B sides. By having the A and B sides cross-connected so that the outputs of upstream modules are 
provided redundantly in a cross-connected fashion to both downstream redundant modules, an indication by 
any module on either side that the other is faulty will cause only that module to be taken out of the system. 
This is distinguished from the prior art, where a detected failure would cause the whole A or.B side to kick 

40 in or out. 

According still further to the present invention, the APS functions are handled asymmetrically by placing 
the algorithm for checking statuses from both the A and B sides on the B side (protection side). Thus, the 
statuses on loss of signal, out-of-frame, loss of pointer and excessive bit error rate are checked, according 
to the present invention, on the protection (B) side, while a more symmetrical approach is taken for 
45 equipment failures, wherein each particular kind of module checks, with the same algorithm as its like 
module, a module failure within itself and communicates its status to the other like module. . 

According further to the present invention, an example network element has redundant high speed 
interfaces, cross-connects and drop modules wherein each upstream module on each redundant side 
provides a signal to a downstream module on one redundant side and also a redundant signal to a 
so downstream module on the other redundant side in both the transmit and receive directions. 

Thus, the present invention employs a "distributed" concept in which an upstream failure will result in 
the disablement of the upstream module in which the problem is detected, a switchover to a backup module 
at the same upstream level wherein the output of that upstream substitute module is provided to both 
downstream modules on each redundant side so that the working downstream module may continue to 
55 operate instead of having the entire backup redundant side substituted for the working side. In this way, the 
substituted upstream module and the original working downstream module will operate together until such 
time as either the original upstream module is healed or the downstream module is detected bad. In the 
former event, the original working upstream module can go back into the prior mode and take over the 
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upstream function. In the latter case, the backup downstream module will be substituted for the primary 
working downstream module. In this way, the inflexibility of the prior art whereby an entire redundant side 
would be disabled if a problem were detected in one of its modules is avoided and a more flexible 
approach is taken whereby resources may be maximized. Although we have given an example of a 
5 disablement of an upstream disablement causing a switchover it should be realized that the concept applies 
equally well to downstream disablements. In other words, if for example a disablement is found in an 
intermediate module that module may be substituted for by a redundant intermediate module but the other 
working modules may stay the same. 

In further accord with the present invention, the switchover decisions can be made on the redundant 
ro module sets detecting the failures and are communicated to the elements on the data path. Controllers on 
the working and protection high speed interfaces communicate for the switchover decisions. 

In still further accord with the present invention, all elements on the data path receive payload data from 
both the working and protection high speed SONET interfaces. The decision is made on the first element 
that receives the payload data. 
is According further to the present invention, the mechanism also takes into account a self-diagnosed 
printed board assembly failure. 

These and other objects, features and advantages of the present invention will become more apparent 
in light of the detailed description of a best mode embodiment thereof, as illustrated in the accompanying 
drawing. 

20 

BRIEF DESCRIPTION OF THE DRAWING 

Fig. 1 shows a distributed switching example implemented for SONET facility and equipment switchover, 
according to the present invention; . - * 

25 Fig. 2 shows the manual mode of operation wherein the A equipment is selected in a forced switch; 
Fig. 3 shows manual mode with a forced switch to equipment B; 

Fig. 4 is a flow chart showing a series of steps carried out according to the present invention, according 
to a facility APS selection algorithm as further detailed in Figs. 5-11; 

Fig. 12 shows an equipment selection scenario carried out, according to the present invention, according 
30 to a APS mode equipment protection algorithm, as further detailed in Figs. 13-17; 

Figs. 18 and 19 show a local controller failure scenario which may be best understood by substituting 
Figs. 18 and 19 for Figs. 14 and 15 in Fig. 12; and 

Figs. 20 and 21 show an unprovisioned module removal scenario similar to the payload path failure, 
scenario and which may also best be understood by substituting Figs. 20 and 21 for Figs. 14 and 15 in 
35 Fig. 12. 

BEST MODE FOR CARRYING OUT THE INVENTION 

This invention relates to a class of equipment known as "protected" equipment. There are many 

40 examples of protected equipment in systems, particularly electronic systems, and more particularly 
communications systems. The best mode embodiment of the present invention shown herein is for a 
SONET (Synchronous Optical NETwork) equipment; however, both the methodology and independently the 
mechanism are valid for, and may be realized in, other types of protected equipment. 

Fig. 1 shows a distributed APS switching implementation 10 for SONET facility and equipment 

45 switchover, according to the present invention. A SONET facility, such as a central office, provides a 
SONET signal such as an OC-3 signal on a line 12 and a OC-3 protection signal on a line 14 which is a 
duplicate of the signal on the line 12 and serves as a backup. A SONET network element ("equipment" in 
industry parlance) such as shown in Fig. 1 can have a SONET interface A 16 for interfacing with the OC-3 
working line 12 and will also have a SONET interface B, i.e., a protection interface 18 for interfacing with the 

so protection line 14. A communication link 20 will be established between the A interface 16 and the B 
interface 18 for communicating status. For example, the high speed interface A 16 may detect a problem in 
the OC-3 line 12 as indicated by an "X" 22 and indicate to the high speed interface B 18 over the 
communication link 20 that there is a problem.. 

The module selection commands will be communicated to a cross connect A 24 by a K1* byte inserted 

55 in an internal SONET-like albeit parallel signal by the high speed interface A 16 and communicated over a 
parallel data path 28 existing between the high speed interface A 16 and the cross connect A 24. The K1* 
byte is an internal APS byte transported in the same byte position as the SONET K1 byte. A data path will 
also be provided on a line 30 for communicating K1* from the high speed interface A 16 to the cross 
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connect B 26 at al! times. Thus, the Kl* byte indicating under normal conditions the selected active high- 
speed module request with the OC-3 working line 12 will also be communicated to the cross connect B 26 
by the high speed interface A 16 over the line 30. 

Similarly, a parallel data line 32 is provided between the high speed interface B 18 and the cross 
5 connect 26 and another data line 34 is provided between the high speed interface B 18 and the cross 
connect A 24. 

A decision to switch over to one or the other high-speed modules is communicated over these lines in 
the K1* byte, as described below. A K2* byte, by way of acknowledgement, is provided in the opposite 
direction from the cross-connects to the high-speed interfaces to indicate compliance or lack thereof (not 
w shown). . ■ 

By having the cross connects 24, 26 responsive at all times to incoming data from both the working line 
12 and the protection line 14, any decision to switch over to the other high-speed interface may be effected 
in an almost instantaneous manner without having to. communicate back and forth to and from a system 
level control function and without having to cause a signal path to be established where hone existed 
75 before. Moreover, by providing the upstream module selection in the K1* byte itself to the cross connects, 
the need for additional controller functionality to make the decision and effect the selection function is 
obviated. 

Further, a pair of redundant downstream modules 36, 38 such as drop modules, are also distributed 
with respect to the cross connects 24, 26. In other words, drop module 36 is responsive at all times to the 

20 outputs of cross connect A 24 and cross connect B 26 as provided on signal lines 40, 42, respectively. 
Similarly, drop module 38 is responsive to the output of cross connect A 24 on a line 44 while at the same 
time being responsive to the output of cross connect B 26 on a line 46. The signal paths going in . the drop 
direction, as shown in Fig. 1 are, of course, equally applicable in the opposite, add direction (not shown). 
The architecture shown in Fig. 1 permits a distributed switching of inoperative hardware wherein, for 

25 example, if the A cross-connect 24 is detected to be inoperative, the B cross-connect will be used to 
respond to the signal on the line 30 as a continuing upstream working channel with the signal on the line 32 
continuing its role as a backup channel. This is distinguished from the prior art of automatic protection 
switching wherein if a component such as. the cross-connect A were detected bad it would cause the entire 
line of modules 16, 24, 36 to be taken out of service and the line of equipment 18, 26, 38 substituted 

30 therefor as backups to form an entire new line. This is a rather inflexible approach that does not maximize 
the available equipment. Our approach allows a more flexible and powerful sharing of components which 
increases the automatic protection capabilities of the system. 

In the present disclosure, reference is made throughout to an STS-1** interface which is a proprietary 
interface used within assignee's network element equipment as the mechanism used to implement 

35 intermodule transport of the SONET payload. Since the bandwidth available from intermodule links is 
greater than that required by just the SONET payload itself, the STS-1** is also used as the mechanism to 
implement several system features. These features include STS-1** internal link status monitoring, equip- 
ment automatic protection switching (APS), and SONET facility automatic protection switching. 

AO A. STS-1** Data Format , 

The format and information content of STS-1** is in general the same as the SONET'S STS-1 as defined 
in ANSI T1 .105-1990, incorporated herein by reference, with the exceptions that, depending on the 
interface, the overhead bytes may carry information identical to that on the corresponding STS-1 link, 
45 internally generated and/or terminated signals, or overhead bytes positions i;i which information is undefined 
or unused. Each STS-1** payload link is accompanied by an STS-1** 8 kHz sync signal to identify the 
location of the STS-1** frame. Also, no part of the STS-1** is scrambled. 

The generic position and description of bytes in the STS-1** are defined below for all STS-1** links, 
including optical and electrical interfaces, the Drop Modules and both STS and VT cross connects. 

50 

B. STS-1** Link Structure 

The STS-1"* interface is implemented as an 8 bit wide, STS-1 byte oriented, parallel interface. The byte 
boundaries of the STS-1** interface are defined such that SONET framing bytes, overhead bytes and 
55 payload bytes are transferred in a single clock cycle. The clock rate of the STS-1** is 6;48 MHz (51.840 
MHz divided by 8 bits per byte). The location of the A1 framing byte is identified by a coincident one bit 8 
KHz sync signal. 
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In the receive direction (the direction from the High Speed Interfaces and Drop interface Modules 
toward the cross connect) each STS-1" will consist of an 8 bit wide STS-1 byte oriented, parallel interface 
and a t bit STS-1** sync signal- The location in time of the A1 byte and STS-1"" sync shall be placed on the 
bus by these interface modules at a time three 6.48 MHz clock cycles after the interfaces receive the 2 kHz 

5 network element frame sync from the clock module. The position of the A1 byte for modules receiving the 
receive STS-1"* is identified by the 8 kHz STS-1** frame sync accompanying the STS-1** as a separate 
signal. This sync signal makes it optional for each receiving interface to implement a framing circuit; 
however to maintain compatibility with some existing ASICs (not shown), it remains a requirement in this 
case for each STS1** transmitter to implement an A1, A2 framing generator. Note that the location in time of 

10 the STS-1** and its sync signal is separate from and positioned by the network element 2 kHz sync signal 
received from a Synchronization Subsystem (not shown) to all STS-1** generating pay load carrying 
modules. 

In the transmit direction (the direction from the cross connect toward the High speed Interfaces and 
DROP interface Modules) the STS-1** definition and function is the same as the receive direction. The STS- 
75 1** will consist of an 8 bit wide STS-1 byte oriented parallel interface and a 1 bit STS-1** sync signal. The 
position of the A1 byte is identified by an 8 kHz STS-1** frame sync accompanying the STS-1** as a 
separate signal. 

C. STS-1** Error Monitoring 

20 

Each STS-1** interface contains a valid BIP-8 parity code in the B2 position of the STS-1** frame. This 
B2 is referred to as B2*. The B2* byte is an odd parity BIP-8 (as opposed to the SONET B2 which is even 
parity), calculated over all bytes of the STS-1** line overhead and STS payload and provides in services-full 
time monitoring of the STS-1** link. Each STS-1** link uses B2* to identify a degradation of signal condition 

25 on any of the 8 parallel bits. By monitoring B2* the ability of each STS-1** to carry error free payload is 
continuously evaluated. This technique provides STS-1** loss of signal and loss of frame detection 
mechanism, detects stuck at 0 and stuck at 1 faults on single or multiple lines, and identifies random or • 
deterministic bit errors in the line overhead and STS payload. This information is available to the facility and 
equipment APS functions and to the maintenance functions. The B2* function provides the primary condition 

30 to APS to switch payload to a duplex equipment set for STS-1** interface failures and unprovisioned module 
removals. - 

B2* is detected and evaluated for all STS-1** receivers. A detected error in any of the 8 BIP error 
positions in an STS-1** frame is counted as a single STS-1** link error. The occurrence of a single error is 
latched in a single bit STS-1** error history register. This register is accessible to the local controller (not 

35 shown), can be read by the controller and reset by the controller. The detection of an STS-1** link error may 
be accompanied by a controller interrupt. 

STS-1** link errors also provide an input to an STS-1** status mechanism. This function provides an 
indication of the long term status of each STS-1** link. The function is implemented by an up/down non- 
rollover 5 bit counter (divide by 32). The counter counts down by 1 to zero (but not past zero) for each 

40 STS-1** frame received without a STS-1** link error. The counter increments by 4 to 32 (but not past 32) for . 
each STS-1** frame received with a STS-1** link error. When the value of the counter exceeds 16, the STS- 
1** link is considered failed. This status is the B2* input to the equipment automatic protection switching 
function and a change of status of the B2* state is sent to the local controller as an interrupt event. This 
feature is further disclosed and claimed in the above-cited co-owned, copending application U.S. Serial No. 

45 (Atty. Docket No. 907-121). 

D. STS-1* " Selection Mechanism 

All payload carrying module interfaces consist of a redundant set of A and B STS-1" transmit and 
receive datalinks. The selection of the active link from these redundant sets of A and B STS-1** inputs is 
done at each STS-1** interface receiver. The selection is based on two modes of selection mechanisms: 

1) Manual Mode (Local Controller Selection Mechanism) 

2) APS Selection Mode (Directed Selection Mechanism) 
These selection mechanisms are discussed in . detail below. They are evaluated for purpose, func- 
tionality and priority. Each of the assignee's forthcoming ADM 150 product modules receiving an STS-1*" 
interface shall have the STS-1" receiver selection function capable of terminating both of the selection 
mechanism modes listed above. Modules generating the STS-1** interface may or may not implement a full 
featured APS generation mechanism; for example, the facility APS generation algorithm would not be 
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implemented in facility interface modules which did not offer redundant facility protection. These modules 
would only generate the equipment APS portion of the switching algorithm. The STS-1" selection state table 
is summarized in Table I below for both the Manual and APS modes. 

TABLE I 
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The two KV states interpreted as "Link Failures" (000 and 111) shall be interpreted by the STS-1** 


35 


selection algorithm as if a "No Preference" state had been received. 







D.1. Manual Mode (Local Controller Selection Mechanism) 

4 o The manual mode provides a method for the local controller or the module performing an STS-1** 
selection function to override all other selection mechanisms and dictate whether the STS-1** receiver is 
selecting the A or B STS-1** input. This is the highest priority selection mechanism and all other selection 
mechanisms are ignored when this feature is invoked. The primary use of this feature is to facilitate a 
module being removed from service. All modules receiving an STS-1** from the module selected for 

4 5 removal can use this mechanism to route their active receive payload paths through the alternate duplex 
equipment set. When all active payload paths are rerouted around the selected module, removal of the 
module can be performed without generating the set of alarms that accompany an unprovisioned module 
removal. Consistent with its intended use, when this feature is used to override the equipment and/or facility 
APS mechanisms, a loss of active payload may result. Note that when the manual mode is invoked, all the 

so facility and equipment APS algorithms are still operating and communicating valid STS-1** select requests 
and responses. The manual mode simply ignores the APS selection algorithm's selection request and 
substitutes the manual mode selection. This feature is important when exiting the manual mode and 
returning to the APS mode. Since the APS algorithms were never interrupted, the local controller will know 
the correct STS-1** selection state to return to. 

55 
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0.2 APS Sele ction Mode (Directed Selection Mechanism) 

The APS selection mechanism provides a method, according to the present invention, which allows the 
STS-i" receiver to act as the selection point for the APS function. Therefore a switch from the A STS-1" to 
i he B STS-1" represents a switch from the primary path (usually designated #1, A or primary) to the 
su-zondary path (usually designated protection, B or secondary). All assignee's modules which implement a 
duplex equipment and/or facility protection scheme use this mechanism. The APS selection mechanism is 
overridden by the manual controller selection mechanism. The STS-1" selection state table is summarized 
m Table 1 for both the Manual and APS modes. 

As alluded to above, the APS selection mechanism communicates between the STS-1** generating 
module and the STS-1** receiving (selection) module using the K1* and K2* bytes of the STS-1** link. These 
bytes are located in the same position in the STS-1** line overhead as the K1 and K2 bytes which 
.mplcmcnt the facility APS function. in the SONET facility but have unique definitions and handling. Each 
STS-i~'s K1* and K2* bytes are independently integrated for three frames (three consecutive identical 
VlJU , fS > Dofore they are considered valid. An interrupt is sent to the local controller when the integrated 
of Kr and/or K2* changes. The selection mechanism then uses the A/B STS-1"* selection request in 
if»- ► t ■ t>,<tc of the operating STS-1** interface(s) according to the selection state table of Table I. 

► t Mn-uests received from both A and B STS-1** inputs as well as the current STS-1** selection state 
iwfn,,.j in the reverse direction in the K2* byte. This allows the STS-1** switch generation mechanism 
! : brt, .* uv current state of its duplex unit and the downstream STS-1** receiver. 

7** Kf hyte is the-command channel of the APS mechanism. It uses the three least significant bits 
ii SH ; < < the byte to signal APS selection requests. The requests are for Select A, Select B, and No 
Pi.- t,:-i. net: No preference is used to signal that a local failure has been detected by the STS-1** generating 
mm-ii.it; and that the receiver should honor the APS request from the duplex unit. Also each request can 
have two values, one being the inversion of the other (i.e. Select Axode = 001 or 110). This is to detect 
siiont la lures in the APS selection datapath. The K1* request bits are reflected in the K2* byte from the 
receiving end. By sending the inverted code for the current APS request, the new. code will be seen in the 
return K2' byte verifying the datapath without affecting the current APS selection. Codes 000 and 111 will- 
never be generated, and if received will signify an error condition and will be treated as a No Preference. 
Table II summarizes the definition and values of the transmitted and received K1* byte. 
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5 

Kl* (Command) Byte Definitions 
Transmitted Kl* Byte 



7 6 5 4 3 


2 10 


Reserved for 


STS-1** 


Interconnection 


Select 


Verification 


Request 



75 


0 


0 


0 


Never Generated 




0 


0 


1 


Select A 




0 


1 


0 


Select B 




0 


1 


1 


No Preference 




1 


0 


0 


No Preference . 




1 


0 


1 


Select B 


20 


1 


1 


0 


Select A 




1 


1 


1 


Never Generated 



Received Kl* Byte 



25 


7 € 5 4 3 


2 1 0 




Reserved for 


STS-1** 




Interconnection 


Select 




Verification 


Request 



30 



35 



0 0 0 Link Fail (No Pref ) 

0 0 1 Select A 

0 10 Select B 

0 1 1 No Preference 

1 0 0 No Preference 
10 1 Select B 

110 Select A 

111 Link Fail (No Pref) 



Note : 

40 The two Kl* states interpreted as "Link Failures" (000 and 111) shall 
Joe interpreted by the STS-1** selection algorithm as if a "No 
Preference" state had been received. Separately, the receipt of a 
link failed state shall be an input to the equipment status algorithms 
and can be used to alarm equipment failures and assist troubleshooting 
algorithms attempting to identify failed mcdules and failed internal 

45 interfaces . 

The K2 W byte is the reverse status channel of the APS mechanism. It returns the K1* select request bits 
sent by each module and its duplex module receiving unit mode (Manual Forced or APS). This allows the 

so APS algorithm in each module to know the status of the downstream receiving unit and its duplex partner 
unit. The received K1* request bits are reflected in the K2* byte unless a B2* Link Failure is detected in that 
link, then a 1 11 code is returned to signal that a link failure has been detected. A 000 code will never be 
generated and if received indicates an error condition. Table HI summarizes the definition and values of the 
transmitted and received K2* byte. 

55 The information contained in each K2* byte is a complete set of the selection requests from both the A 
and B redundant modules, and also the state of the selection mechanism in the downstream module. This 
information can be evaluated by a verification algorithm which is a subset of the APS algorithm to establish 
that the selection decision produced by the APS algorithm has indeed been honored by all modules 
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involved with that APS process. This verification algorithm can thus establish whether each of the 
communication links between the modules associated with that APS process is operating correctly. Also, it 
can establish that each redundant module is correctly transferring switching state requests from the 
communication link between the redundant modules to the downstream modules performing the selection 

5 function. By substituting the redundant values of the selection requests, the verification algorithm can also 
establish the status (operational or failed) of all the messaging links and message transfer functions. 
Because each of the switch request states has a redundant set of values, these tests can be performed 
continuously, without affecting customer traffic. Therefore, this invention provides the methodology and the 
mechanism to provide comprehensive, continuous, in-service self diagnostics of the APS function with no 

70 adverse effects on customer service. 

Tab hcc 



15 



K2* (Status) Byte Definitions 
Transmitted K2* Byte 



-7 6 5 4 3 2 1 0 



1 

Selected 


i ?-■ ■ 
Duplex 


Return 


STS-1** 


Select 


Select 


■ 


Request 


Request 
1 1 



30 



APS Mode 


0 


0 


0 


0 


0 


0 


0 


0 


.Never Generated 


Select A 






0 


0 


1 . 


0 


0 


1 


Select A 


APS Mode 


0 


1 


0 


1 


0 


0 


1 


0 


Select B 


Select B 






0 


1 


1 


0 


1 


1 


No Preference 


Manual Mode 


1 


0 


1 


0 


0 


1 


0 


0 


No Preference 


A Forced 






1 


0 


1 


1 


0 


1 


Select B 


Manual Mode 


1 


1 


1 


1 


0 


1 


1 


0 


Select A 


B Forced 






1 " 


1 


1 


1 


1 


1 


B2* Failure on 
Receive STS-1** Link 



Received K2* Byte 





7 ■ 6 


5 4 ' 3 


.2 1 0 




Selected 


1 I 
Duplex 


i i 
Return 




STS-1 * * 


Select 


Select 


40 


I 


Request 
■ i 


Recruest 



APS Mode 


0 


0 


0 


.0 


0 


0 


0 


0 


Link Failure 


P Selected 






0 


0 


1 


0 


0 . 


X 


Select A 


fi^S Mode 


0 


1 


0 


1 


0 


0 


1 


0 


Select B 


45 B Selected 






0 


1 


1 


0 


1 


1 


No Preference 


Manual Mode 


1 


0 


1 


0 


0 


1 


0 


0 


No Preference 


A Forced 






1 


0 


1 


1 


0 


1 


Select B 


Manual Mode 


1 


1 


1 


1 


0 


1 


1 


0 


Select A 


B Forced 






1 


1 


1 


1 


1 


1 


Link Failure 

or B2* Link Failure 



50 



An important feature of the STS-1™ interface is that the selected A/B STS-1** information that. is 
transported in the reverse direction over the STS-1** link by the K2* byte can be used by the APS process 
to extend equipment protection over the STS-1** links. 
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D 3 STS- 1 " Selection Algorithm Description 

Tht; Miowruj provides a description of the various STS-1" selection algorithm states found in Table I. 

in Hernial operating circumstances the A/B STS-1" switch request bits in the K1* byte from the A and B 
S r S-t~ generating modules have the same value and the switch request shall be honored when the K1* 
v. nd .at on algorithm described has been satisfied. 

in the normal transient case (where the A/B STS-1** switch request bits in the K1* byte do not match in 
actfy the same frames, a normal condition during switchover) or when an equipment failure presents a 
contacting switch request from the A and B STS-1** generators the A/B STS-1** switch selection mechanism 
maintains a "no change" state (if it was selecting STS-1** A it continues selecting STS-1** A, same for 
si. looting STS-1" B) until this conflicting A/B STS-1** selection switch state is cleared. - 

When both STS-1** selection request generators are indicating the "no request" state, the selection 

ham cm maintains the "no change" state described above. 

wh. n .t c hgie STS-1** link failure is detected, the STS-1** selection algorithm will honor the A/B STS-1** 
- • i *> ; .. of tho STS-1" link which is still operating without failure, even if the A/B STS-1** switch request 

t-- = ^ t.n.j the failed link (this should be a transient condition). This selection criteria can force the 

^ u. : * j non-operative or even non-existent facility interface which may result in a loss of payload, 
*v - <. onsistent with the facility APS scenarios. 

< ( t-*m STS-1** links have failed, the selection mechanism maintains the "no change" state 

w^.-v. h, M.tntial Mode selection mechanism commands the selection mechanism to select the A or B 
r* th. -.-I* .-tion mechanism shall comply, even if the selection request conflicts with the APS mode 
\, m v <n riMjtjir.-.i heing received in byte K1*. 

0 4 STS-1 " Sele ction Scenarios 

The following provides specific examples of STS-1 1 ** events. 

0 a i Manu al Mode. Local Controller Selection Scenarios 
20 • ' ... . 

Thofc are two states for the controller selection mechanism, the select STS-1** A state and the select 
STS-i" B state.. Examples of these two states are shown in Figures 2 and 3, respectively. The following 
o.urv descriptions describe these two 

2b Manual Mode. Select STS-1** A (Figure 2) 

1 Initial State: The initial state can be any of the STS-1** selection states. 

2 a system level control function provisions the local controller to select STS-1** A: This would be a 
response to a craft/OS command or local test or maintenance routine. 

40 3 The local controller provisions the STS-1** selection mechanism to select STS-1** A: This command is 
absolute and overrides all other input parameters to the selection mechanism. 

4 STS-1" A State: The STS-1** selection mechanism is now in the select STS-1** A state and will remain 
until provisioned otherwise. 

45 Manual Mode. Select STS-1** B (Figure 3) 

1 initial State: The initial state can be any of the STS-1** selection states. 

2. A system level controller provisions the local controller to select STS-1"* B: This would be a response 
to a craft/OS command, local test or maintenance routine, 
so 3. The local controller provisions the STS-1** selection mechanism to select STS-1** B: This command is 
absolute and overrides all other input parameters to the selection mechanism (K1* and B2* status). 
4. STS-1 ** B State: The STS-1** selection mechanism is now in the select STS-1*" B state and will remain 
. until provisioned otherwise. 

56 D .4.2. APS Mode, Directed Selection Scenarios 

There are two types of APS Mode Selection algorithms, a facility APS selection algorithm and an 
equipment protection algorithm. Facility protection APS algorithms are executed in the facility interface 
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modules of facilities with duplex facility protection (primarily SONET facilities). The distinguishing char- 
acteristic of facility protection algorithms is that they operate in facility interfaces where there is no 
processor or equipment failure. When an equipment failure is detected the equipment protection algorithm 
takes over the APS process. Equipment protection algorithms are implemented in all duplex equipment 
5 protected modules (including facility protected modules). The following sections provide examples of both 
types of APS mode protection. 

D.4.3 APS Mo de, Facility Selection Scenario 

10 The facility selection scenario is designed to demonstrate how the STS-1" selection mechanism 
implements the function of the STS-1** A (working line) or STS-1 "B (protection line) selection. The APS 
mode of the STS-1** selection mechanism is used to implement the facility protection selection for any 
facility which has duplex facility protection (usually referred to as 1:1 or 1 + 1 facility protection). SONET 
interfaces are examples of facilities which are normally engineered with duplex facility protection, however, 

75 this mechanism will operate with all facility interfaces should they implement a duplex facility protection 
mode. 

SONET interfaces are the only facility interfaces which are currently engineered to operate in the 
duplex facility protection mode, therefore this scenario is written for the OC-N interfaces. Note that, 
according to the invention, the OC-N facility APS is an unsymmetrical protection algorithm, i.e., facility 
20 failures on the working line are handled differently than facility failures on the protection line. Since the 
" failure of the protection line when payload is being carried on the working line requires no action by the - 
STS-1*" selection mechanism there is no explicit STS-1"* selection scenario for this event. Actions initiated" 
by the failure of the protection span under these conditions are primarily alarm related. 

The failure of the protection line when the working line has failed, a switchover to the protection line has 
25 been completed; the working line has cleared and is waited for manual restoration is a variation of the 
working line failure scenario and is covered as a subset of this scenario. 

1. Initial State 100: (Figures 4 & 5) The system level control function instructs the local controllers for the 
corresponding duplex facility interfaces and the STS-1** selection mechanism to operate in the APS 

'mode. Both working and protection lines are operational ^and both duplex facility interfaces (OC-N 
30 interfaces in this example) are working and provisioned to operate in the APS mode. In this state both 
STS-1** selection mechanisms implement the term of the selection state table shown in Fig. 5 and select 
STS-1** A (the working line). Note that payload received over the working line through OC-N interface A- 
is selected by both cross connect A and B duplex equipment sets. 

2. Working Facility Fails 102: (Figures 4 & 6) The local controller on the OC-N A interface detects the 
35 facility failure. The local controller in OC-N A reports the working line facility failure to the local controller 

in OC-N B. The controller in OC-N B inputs this parameter into the facility APS algorithm operating on 
OC-N B and decides whether or not to initiate a change in the module selection request. Note that OC-N 
A does not autonomously send K1* with a switch select request to the STS-1** B state. In this state both 
STS-1** selection mechanisms implement the term of the selection state table shown in Fig. 6 and select 
■40 STS-1** A (the working line). 

3. Facility APS Algorithm commands an APS to the Protection Line 104: (Figures 4 & 7) The controller 
on OC-N B provisions the K1* byte on both its STS-1** transmitters to indicate a request to switch to 
STS-1** B. It also sends a command to the OC-N A interface controller to request a switch to STS-1**B. 
In this state both STS-1** selection mechanisms implement the term of the selection state table shown in 

45 Fig. 7, recognize conflicting selection requests and remain in their initial state (a no change action), this 
leaves the payload still operating off of STS-1** A (the working line). 

4. OC-N A Executes the Switch Request from OC-N B 106: (Figures 4 & 8) The controller on OC-N A 
receives the command to send a request to switch to STS-1** B (the protection line). The controller 
provisions the K1* byte on both its STS-1*" transmitters to indicate a request to switch to STS-1** B. in 

so this state both STS-1** selection mechanisms implement the term of the selection state table shown in 
Fig. 8 and select STS-1** B (the protection line). This is the long term state of a facility interface with a 
working line failure until operation of the working line is restored and a revert to working line is received 
from the controller. 

5. Facility Failure Clears 108: (Figures 4 & 9) The local controller on the OC-N A interface detects the 
55 facility failure clear. The local controller in OC-N A reports the working line facility status to the local 

controller on OC-N B. The controller in OC-N B inputs this parameter into the facility APS algorithm 
operating on OC-N B and decides whether or not to initiate a change in the module selection request 
(the facility switch will not be initiated if the APS algorithm is a non-revertive algorithm). Note that OC-N 
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A does not autonomously send Kl* with a switch to STS-1" A state. In this state both STS-1** selection 
mechanisms implement the term of the selection state table shown in Fig. 9 and select STS-1** B (the 
protection line). 

6. Revert Request Honored and Executed by the Facility APS Algorithm or Protection Line Failure 110: 
5 (Figures 4 & 10) When a revert to working line command is received by the facility APS algorithm on 

OC-N B, the controller on OC-N B provisions the K1* byte on both its STS-1** transmitters to indicate a 
request to switch to STS-1** A. It also sends a command to the OC-N A interface controller to request a 
switch to STS-1*" A. In this state both STS-1"* selection mechanisms implement the term of the selection 
state table shown in Fig. 10, recognize conflicting selection requests and remain in their initial state (a no 
;o change action), this leaves the payload still operating off of STS-1** B (the protection line). 

Failures of the protection line also initiate the response described in this section with the exception 
that the APS algorithm initiates the switch from the protection line failure instead of waiting for a 
command to revert. 

7. OC-N A Executes the Switch Request from OC-N B 112: (Figures 4 & 11). The controller on OC-N A 
is. receives the command to send a request to switch to STS-1** A (the working line). The controller 

provisions the K1* byte on both its STS-1** transmitters to indicate a request to switch to STS-1** A. In 
this state both STS-1** selection mechanisms implement the term of the selection state table shown in 
Fig. 11 and select STS-1** A (the working line). This is the initial state of the facility interface. 

.■>■. 04 4 APS Mode, Equipment Selection Scenarios - 

The following sections provide examples of the three primary equipment failure scenarios. The first 
o* ample demonstrates the reaction to the failure of an ; equipment payload path, the second example 
demonstrates the reaction to a failed local controller and the third example demonstrates the reaction to an 
unprovisioned module extraction. 

The equipment selection scenarios are designed to demonstrate how the STS-1** selection mechanism 
implements the function of the STS-1** A (A or primary equipment) or STS-1**B (B or backup equipment) 
selection. The equipment APS selection class of STS-1** selection mechanisms is used to implement the 
equipment protection selection for any equipment which has duplex equipment protection (usually referred 
id as duplex or redundant equipment protection). 

The equipment APS algorithm is a symmetrical protection algorithm, equipment failures on the working 
equipment are handled the same way as equipment failures on the protection line. Since the failure of either 
equipment set when payload is being carried on the duplex equipment set requires no action by the STS-1** 
selection mechanism there is no explicit STS-1** selection scenario for this event. Actions initiated by the 
ta lure of the unused equipment set under these conditions are primarily alarm related, therefore refer to the 
equipment diagnostic section of each equipment set description for responses to the failure of an unused 
set. The failure of the redundant equipment. set when the working equipment set has failed, a switch to the 
redundant set has been completed, the working equipment failure has cleared and is waited for manual 
restoration is a variation of the working equipment set failure scenario and is covered as a subset of this 
scenario. 

APS Mode, Payload Path Equipment Failure 

1. initial State 114: (Figures 12 & 13) The controller instructs the local controllers for the corresponding 
duplex equipment interfaces and the STS-1** selection mechanism to operate in the APS mode. Both 
primary and backup equipment sets are operational and are provisioned to operate in the equipment 
APS mode. In this state both STS-1** selection mechanisms implement the term of the selection state 
table shown in Fig. 13 and select STS-1™ A (the primary equipment set). Note that payload received 
from the primary equipment set is selected by both selecting equipment A and B duplex equipment sets. 

so 2. Primary Equipment Fails 116: (Figures 12 & 14) The local controller on the primary equipment set 
detects an equipment failure. The controller on the primary equipment set A provisions the K1* byte on 
both its STS-1" transmitters to indicate a "no preference" switch request. The local controller in the 
primary equipment set A then reports the equipment failure condition to the local controller in the backup 
equipment set B. The controller in the backup equipment set B inputs this parameter into the equipment 

55 APS algorithm operating on the backup equipment set B and decides whether or not to initiate a change 
in the module selection request. In this state the STS-1** selection mechanisms implement the term of 
the selection state table shown in Fig. 14 and select STS-1** A (the primary equipment set). 
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3. Equipment APS Algorithm commands an APS 'o the Backup Equipment set 120: (Figures 12 & 15) 
The controller on the backup equipment set B provisions the K1* byte on both its STS-1** transmitters to 
indicate a request to switch to STS-1"* B. In this state both STS-V* selection mechanisms implement the 
term of the selection state table shown in Fig. 15 and select STS-1"* B (the backup equipment set). This 

5 is the long term state of the equipment with a primary equipment set failure until operation of the primary 
equipment set is restored. 

4. Equipment Failure Clears 122: (Figures 12 & 16) The local controller on the primary equipment set A 
detects the equipment failure clear. The local controller in the primary equipment set A reports the 
primary equipment set status to the local controller in the backup equipment set B. The controller in the 

ro backup equipment set B inputs this parameter into the equipment APS algorithm operating on the 
backup equipment set B and decides whether or not to initiate a change in the module selection request 
(the equipment switch will not be initiated if the APS algorithm is a non-revertive algorithm). Note that the 
primary equipment set A does not autonomously send KV with a request to switch to STS-1** A state. In 
this state both STS-1** selection mechanisms implement the term of the selection state table shown in 

15 Fig. 16 and select STS-1** B (the primary equipment set). 

5. Revert Request Honored and Executed by the Equipment APS Algorithm or Backup Equipment set 
Failure 124: (Figures 12 & 17) when a command to revert to the A (working side), equipment set is 
received by both local controllers, the controllers on both equipment sets provision the K1* bytes on their 
respective STS-1** transmitters to indicate a request to switch to STS-1** A. In this state both STS-1** 

20 selection mechanisms implement the term of the selection state table shown in Fig. 17 and select STS- 
1** A (the primary equipment set). This is the initial state of the equipment interface. 

Failures of the backup equipment set also initiate a switch back to the primary equipment set A. The 
response to this failure operates as described in operation descriptions 2 and 3 above with the exception 
that the labels A and B are reversed. 1 

25 - " 

D.4.5 APS Mode, Local Controller Failure 

The local controller scenario is similar to the payioad path failure scenario with the exception that with a 
local controller failure the processor can no longer insert the rt no preference" state in the transmitted K1* 
30 byte and program the "Not OK" equipment status toward the duplex controller. This failure is handled by 
having the hardware output' of the watchdog timer which is active when the local controller fails, force the 
transmitted K1* byte and duplex equipment status line to their K1* = all Vs (no preference), and "Not OK" 
respective states. - . * * - 

The equipment status signal and the ability to force K1* to the "no preference" state shall be 
35 implemented in a manner which does not require the microprocessor or its serial link to be operational and 
requires a little hardware as possible to be operational. These states shall be capable of being set active by 
the local controller or forced active by the watchdog timer or similar mechanism. 

The complete scenario of this type of failure event is described by substituting Fig. 18 and Fig. 19 for 
Figs. 14 and 15, respectively in the sequence of steps of Fig, 12. The descriptions of these events change 
40 only in that equipment A sends an all Vs signal (interpreted as a no preference request) in the K1* byte 
when the processor fails instead of the 01 1 no preference selection request. 

D.4.6 APS Mode, Unprovisioned Module Removal 

45 The unprovisioned module removal scenario is similar to the payioad path failure scenario with the 
exception that with a local controller failure the processor can no longer insert the "no preference" state in 
the transmitted K1* byte and program the "Not OK" equipment status toward to duplex controller. This 
failure is handled by having a mechanism such as puli-up resistors on the modules receiving these signals 
which automatically force the state of the receiving modules input lines to their K1* = all Vs (no preference) 

so and "Not OK" respective states when the duplex module is removed. 

Ail data and status lines for STS-1** interfacing modules shall have mechanisms and signal sense 
definitions such that any STS-1** module removal will result in an insertion all Vs (AIS) in the payioad path 
and a "Not OK" for all status lines. 

The complete scenario of this type of failure event is described by substituting Figs. 20 & 21 for Figs. 

55 14 & 15, respectively. The descriptions of these events change only in that the equipment receiving the 
STS-1** A receives an all Vs signal (interpreted as a no preference request) in the KV byte when the 
processor fails instead of the 011 no. preference selection request. 
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Although the invention has been shown and described with respect to a best mode embodiment thereof, 
it should be understood by those skilled in the art that the foregoing and various other changes, omissions 
and additions in the form and detail thereof may be made therein without departing from the spirit and 
scope of the invention. 

5 

Claims 

1. Apparatus having automatic protection switching, comprising: 

a working transmit interface (16), responsive to a selection command signal (20b) and to an input 
w working signal (12), for providing a working status signal (20a) and a pair of identical output working 

signals (28, 30) having data and selection information; 

a protection transmit interface (18), responsive to the working status signal (20a) and to an input 
protection signal (14), for providing the command signal (20b) and a pair of identical output protection 
signals (32, 34) having data and selection information; . 
75 a working receive interface (24), responsive to the working signal 28 and to the protection signal 34 

for selecting one of the signals 28, 34 according to the selection information therein; and 

a protection receive interface (26), responsive to the working signal 30 and to the protection signal 
32 for selecting one of the signals 30, 32 according to the selection information therein. 

20 2. The .apparatus of claim 1, wherein the working receive interface (24) is responsive to the selected 
signal (28 or 34) for providing a confirmation signal (29a) to the working transmit interface (16) and for 
providing a confirmation signal (29b) to the protection transmit interface (18) and wherein the protection 
receive interface (26) is responsive to the selected signal (30 or 32) for providing a confirmation signal 
(31a) to the working transmit interface (16) and for providing a confirmation signal (31b) to the 

25 protection transmit interface. 

3. The apparatus of claim 1. wherein the working and protection transmit interfaces (16, 18) are SONET 
interfaces and wherein the working and protection receive interfaces (24, 26) are cross-connects and 
wherein the cross-connect 24 provides a working status signal (25a) in response to the signals (28, 34) 
30 and is also responsive to a command signal 25b for providing a pair of identical working drop signals 

(40, 44) having data and selection information and wherein the cross-connect (26) provides the 
command signal (25b) in response to the working status signal (25a) and also provides an identical pair 
of protection drop signals (42, 46) having data and selection information. 

35 4. The apparatus of claim 3, further comprising: 

a working drop module (36), responsive to one (40) of said identical working drop signals, for 
providing a working output signal (48); and 

a protection drop module (38), responsive to one (44) of said identical working drop signals and to 
one (46) of said identical protection drop signals, for providing a protection output signal (50). 

40 

5. Apparatus having automatic protection switching, comprising: 

a working high speed interface (16), responsive to a command signal (20b) and to a synchronous 
optical network (SONET) serial working signal (12), for providing a status signal (20a) and a pair- of 
identical parallel working signals (28, 30) having data and selection information; 
45 a protection high speed interface (18), responsive to the status signal (20a) from the interface (16) 

and to a SONET serial protection signal (14), for providing the command signal (20b) and a pair of 
identical parallel protection signals (32, 34) having data and selection information; 

a working cross-connect (24), responsive according to said selection information to one (28) of said 
parallel working signals or to one (34) of said parallel protection signals, for providing a pair of identical 
so working drop signals (40, 44) having data and selection information; 

a protection cross-connect (26), responsive according to said selection information to one (30) of 
said parallel working signals or to one (32) of said parallel protection signals, for providing a pair of 
identical protection drop signals (42, 46); 

a working drop module (36), responsive to one (40) of said identical working drop signals and to 
55 one (42) of said identical protection drop signals, for providing a working output signal (48); and. 

a protection drop module (38), responsive to one (44) of said identical working drop signals and to 
one (46) of said identical protection drop signals, for providing a protection output signal (50). 
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6. Apparatus having equipment protection switching, comprising: 

a working transmit interface (16), responsive to a protection status signal (20b) and to an input 
working signal (12), tor providing a working status signal (20a) and a pair of identical transmit working 
signals (28, 30) having data and selection information provided according to a selection algorithm; 

a protection transmit interface (18), responsive to the working status signal (20a) and to an input 
protection signal (14), for providing the protection status signal (20b) and a pair of identical transmit 
protection signals (32, 34) having data and selection information provided according to the same 
selection algorithm as in the working transmit interface; 

a working receive interface (24), responsive to the working signal 28 and to the protection signal 
34, for selecting one of the signals 28, 34 according to the selection information therein; and 

a protection receive interface (26), responsive to the working signal 30 and to the protection signal 
32 for selecting one of the signals 30, 32. 

7. An automatic protection method for a synchronous optical network (SONET) element having redundant 
A and B sides each side having a high speed interface responsive to a working line on the A side and a 
protection line on the B side, having a cross-connect and drop module and having a normal facility 
state (100) with payload provided from the working line, comprising the steps of: 

providing redundant working payload signals from the A side and redundant protection payload 
signals from the B side; 

determining (102) on the A side that a facility failure of the working line exists and reporting a failed 
status to the B side; j 
commanding (104) from the B side a state with payload provided from the B side; and r> 
executing (106) a switchover to the B side and providing payload from the B side. • * 

8. The method of claim 7, further comprising the steps of: 

determining (108, 110) that the facility failure of the working line has cleared; and 
executing (112) a switchover to the A side and providing the redundant payioad signals from the A 
side. 

9. An equipment protection method for a synchronous optical network (SONET) element having redundant 
A and B sides, each side having a high-speed interface responsive to a working line on the A side and 
a protection line on the B side, having a cross-connect and drop module. and having a normal facility 
state (114) with payload provided from the working line, comprising the steps of: 

providing redundant working payload signals from the A side and redundant protection payload 
signals from the B side; 

determining (116) on the A or B side that an equipment failure of the A or B side exists and 
reporting a failed status from the failed side equipment to comparable equipment on the other side; and 

commanding (120) in the non-failed side comparable equipment a switchover to the non-failed side 
comparable equipment. 

10- The method of claim 9, further comprising the steps of: 

determining (122) on the failed side that the failed side equipment failed status has cleared and 
reporting same to the non-failed side; and 

executing (124) a switchover to the non-failed side. 

11. The method of switching to facility data and overhead signals from a standby B path upon detection of 
main signal A path signal failure, comprising the steps of: 

checking incoming A path signals by an A path working channel interface unit; 

directly notifying a B channel standby channel interface unit, which is simultaneously receiving data 
identical to the data on said working channel, that a signal failure condition exists on the A path; 

providing a switchover command signal from the B channel standby interface unit to the A channel 
interface unit; and 

inserting a coded signal sent downstream, as part of the overhead data, by both the A and B 
channel interface units to respective A and B path downstream units to inform said downstream units 
that they should respond to B channel data rather than A channel data until otherwise notified. 

12. A method of claim 11, wherein the method further comprises steps for switching equipment in the A 
and B paths, wherein said further steps comprise: 
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checking pairs of identical A path and B path equipment by means of identical failure detecting 
algorithms resident in each equipment of a given pair; 

detecting a failure in a first opposite equipment of a pair and directly notifying a second opposite 
equipment of said pair, which is simultaneously receiving data on an identical channel wherein said 
5 received data is identical to received data on said first opposite equipment, that switching to the second 

opposite equipment should occur; and 

inserting a coded signal sent downstream, as part of the overhead data, by both the A and B 
opposite equipment to a downstream unit to inform said downstream unit that it should respond to data 
from said second opposite equipment rather than from said first opposite equipment until otherwise 
70 notified. 

13. A. method of equipment protection switching between substantially identical sets of serially connected 
subsystems normally comprising independent working and protection communication paths, comprising 
the steps of: 

15 checking, using identical algorithms resident in identical opposite modules of equipment pairs, one 

for transporting working data signals and overhead signals, and the other for transporting identical 
protection data and overhead signals, said overhead data signals having signals pertaining to identifying 
a selected one of said opposite modules to be used as a working module; 

communicating self-status signals directly between said identical module and wherein one of said 
20 identical opposite modules is presently designated as working, and wherein said identical algorithms 

operate to determine at least one of, 

the presently designated working subsystem is not outputting correct data, 
the presently, designated working subsystem is not receiving correct data, and 
the presently designated working subsystem has received overhead data indicating that a switch of 
25 working data signals is about to occur; and 

communicating with the next subsystem downstream, via said overhead signals, to respond to data 
from said protection module. 

14. A method of protecting data flow through a series of substantially identical sets of interconnected A and 
30 B path subsystems each normally receiving identical working data and wherein normally only A 

subsystems are transporting active data to a customer, comprising the steps of: 

supplying data from each subsystem to both the A and B path downstream subsystem; 

checking the "goodness" of said subsystems transporting said data signals received by each 

subsystem; 

35 detecting overhead data signals interspersed with working path data for signal path switching 

information inserted by upstream subsystems; and 

switching inputs of only the substituted protection path subsystem and the following working path 
subsystem when said checking and detecting determines switching should occur. 

40 15. A common subsystem, acting in conjunction with function specific circuitry, for use in a series path of 
interconnected signal processing subsystems incorporated in a working data path or protection path, 
comprising, in combination: 

first and second input means for receiving data from A and B data paths; 

means for checking the "goodness" of said subsystem transporting incoming data signals received 
45 by the subsystem and for providing a failure signal in the event of a defection thereof; 

A and B output means for providing identical data, including overhead indicative of said failure 
signal, to A and B path downstream units; 

means for detecting overhead signals interspersed with working path data for signal path switching 
information inserted by an upstream subsystem; and 
so means for switching between processing of data supplied at said A and B inputs when said 

overhead signals indicate a switch should be made. 

16. Apparatus as claimed in claim 15, incorporated in one of A and B paths comprising, in addition: 

status signal input means for receiving a status signal, including a failure signal from a substantially 
55 identical subsystem in the other of said A and B paths. 

17. Apparatus for switching payload and overhead data from a standby B path upon detection of main 
signal A path failure, comprising: 



18 




EP 0 570 882 A2 



means for checking the status of incoming A path signals by an A path working channel interface 

unit; 

means for providing an A path status signal to a B channel standby channel interface unit,, which is 
simultaneously receiving B channel data signals identical to the data signals on said working channel, 
5 of the status of the A path signals; 

means resident in said B channel interface unit for checking the status, of said B channel data 
signals and responsive to said A path status signal for providing a switch command signal in the 
presence of an A path failure status signal; and 

means, responsive to said A path failure signal, for inserting a coded signal sent downstream, as 
w part of the overhead data, by both the A and B channel interface units to a pair of downstream identical 

units to inform said downstream units that they should respond to B channel data rather than A channel 
data until otherwise notified. _ 

18. The apparatus of claim 17, wherein said apparatus further comprises means for switching equipment in 
75 the A and B paths, wherein said means for switch equipment comprises: 

means for checking pairs of identical A path and B path equipment by means of identical failure 
detecting algorithms resident in each equipment of a given pair, wherein said means for checking 
includes: 

means for directly notifying an opposite equipment of said pair, which is simultaneously receiving 
20 data on an identical channel wherein said received data is identical to received data on said first 

■* opposite equipment, that switching to the second opposite equipment should occur; and 

means for inserting a coded signal sent downstream, as part of the overhead data, by both the'A- 
and B opposite equipment to a downstream unit to inform said downstream unit that it should respond 
to data from said second opposite equipment rather than from said first opposite equipment until 
25 otherwise notified. 

- 19. Apparatus for switching between substantially identical sets of serially connected modules normally 
comprising independent working and protection communication paths, comprising: 

means for checking, using identical algorithms resident in each of identical opposite module pairs, 
30 one for transporting working data signals and overhead data signals, and the other for transporting 
identical protection data and overhead signals, said overhead data signals having signals pertaining to 
identifying a selected one of said opposite modules to be used as a working or protection module; 

communicating self-status signals directly between said identical opposite modules and wherein 
one of said identical opposite modules is presently designated as working, and wherein said identical 
35 algorithms operate to determine at least one of, ' 

the presently designated working subsystem is not outputting correct data, 
the presently designated working subsystem is not receiving correct data, and 
the presently designated working subsystem has received overhead data indicating that a switch of 
working data signals is about to occur; and 
40 communicating with the next subsystem downstream, via said overhead signals, to respond to data 

from said working or protection module. 

20. Apparatus for protecting data flow through a series of substantially identical sets of interconnected A 
and B path subsystems each normally receiving identical data and wherein normally only A sub- 
45 systems are serially interconnected to a customer, con prising: 

means for providing data from each upstream subsystem to both the A and B path downstream 
subsystem; 

means for checking the "goodness" of said subsystems transporting said data signals received by 
each subsystem; 

50 means for detecting overhead data signals interspersed with working path data for signal path 

switching information inserted by upstream subsystems; and 

means for switching inputs of only the substituted protection path subsystem and the following 
working path subsystem when said checking and detecting determines switching should occur. 
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© Redundant facility payload signals (12, 14) re- 
ceived by redundant interface modules (16, 18) are 
redundantly provided (28, 30; 32, 34) to redundant 
downstream modules (24, 26) in an equipment (10). 
A non-symmetrical facility protection algorithm is 
resident in the B interface module (18). Symmetrical 
equipment protection algorithms are independently 
resident and operative in each module of pairs of 
identical A and B modules at each stage of the data 
stream. Module or data failures result in switchover 
only of the disabled data path or module so that the 
ability to transport payload is maintained and other 
modules or data paths are unaffected. Facility 
switchover is effected by detecting a working line 
failure and transmitting commands to switch the pro- 
tection line to the A path modules. Equipment 
switchover is effected by checking for a working or 
protection module failure independently in each path 
and independently communicating independent 
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closed in a SONET element embodiment, although 
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